5317 matches found
Seeker Advisory Sep11: Insecure Redirect in Microsoft SharePoint Portal
Seeker Research Center Security Advisory This vulnerability was discovered by Seekerr Automatic Run-Time Application Security Testing Solution Disclosed By Irene Abezgauz, September 13th, 2011 ========= I. Overview ========= An Insecure Redirect vulnerability has been identified in Microsoft...
IBM Open Admin Tool 'index.php' Multiple Cross-Site Scripting Vulnerability
This host is running IBM Open Admin Tool and is prone to multiple cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmopenadmintoolmultxssvuln.nasl 3115 2016-04-19 10:09:30Z benallard $ IBM Open Admin Tool 'index.php' Multiple Cross-Site Scripting Vulnerability Authors:...
XSS Vulnerability in Administration Interface of JIRA Bamboo Plugin
We have identified and fixed a cross-site scripting XSS vulnerability in JIRA administration interface. Affected version is JIRA 4.3.x XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a JIRA page. You can read more about XSS attacks at various places on the web...
WordPress Donation Plugin <= 1.0 - SQL Injection
Donation plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
Web Professional - default.php SQL Injection
Web Professional - default.php SQL Injection source: https://www.securityfocus.com/bid/49399/info Web Professional is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...
CS-Cart 2.2.1 - products.php SQL Injection
CS-Cart 2.2.1 - products.php SQL Injection source: https://www.securityfocus.com/bid/49378/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
ManageEngine ServiceDesk Plus Multiple Stored XSS Vulnerabilities
This host is running ManageEngine ServiceDesk Plus and is prone to multiple stored cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmanageengineservicedeskplusmultxssvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ ManageEngine ServiceDesk Plus Multiple Stored XSS...
VicBlog - tag SQL Injection
VicBlog - tag SQL Injection source: https://www.securityfocus.com/bid/49304/info VicBlog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...
Apple Safari Secure Cookie Security Bypass Vulnerability (Mac OS X)
The host is installed with Apple Safari web browser and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafaricookiesecbypassvulnmacosx.nasl 7015 2017-08-28 11:51:24Z teissa $ Apple Safari Secure Cookie Security Bypass Vulnerability Mac OS X Authors: Sooraj KS...
Code Widgets DataBound Index Style Menu - category.asp SQL Injection
Code Widgets DataBound Index Style Menu - category.asp SQL Injection source: https://www.securityfocus.com/bid/49208/info Code Widgets DataBound Index Style Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection
source: https://www.securityfocus.com/bid/49208/info Code Widgets DataBound Index Style Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions
FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions FireCAT Firefox Catalog of Auditing exTensions is a mindmap collection of the most efficient and useful Firefox extensions oriented application security auditing and assessment. FireCAT is not a replacement of other security utilities...
Lasernet CMS 'id' Parameter SQL Injection Vulnerability
Lasernet CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
BlueSoft Banner Exchange - referer_id SQL Injection
BlueSoft Banner Exchange - refererid SQL Injection source: https://www.securityfocus.com/bid/49091/info BlueSoft Banner Exchange is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...
ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities
This host is running ManageEngine ServiceDesk Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineservicedeskplusmultxssvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities Authors: An...
Joomla! Component com_community - 'userid' SQL Injection
source: https://www.securityfocus.com/bid/48983/info The 'comcommunity' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (metricDetail$type page)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory Oracle Enterprise Manager vulnerable to Cross-site scripting metricDetail$type page July 26, 2011 Risk Level: Medium Affected versions: Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5 Oracle Enterprise...
VLC Media Player '.AVI' File BOF Vulnerability (Linux)
The host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayeravibofvulnlin.nasl 7052 2017-09-04 11:50:51Z teissa $ VLC Media Player '.AVI' File BOF Vulnerability Linux Authors: Madhuri D Copyright: Copyright c 2011...
OpenX Ad Server 2.8.7 Cross Site Request Forgery
Exploit for php platform in category web applications ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage:...
Synergy Software - id SQL Injection
Synergy Software - id SQL Injection source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...